winget packages with open CVEs

2,250 mapped packages currently have at least one open vulnerability. Ranked by critical CVEs published in the last 30 days, then total open CVEs, then install popularity. Updated 9/20/2026, 12:33:22 AM.

Windows Software Development Kit - Windows 10.0.28000.1721
Microsoft Corporation · v10.0.28000.2526
2
open
KiCad
KiCad · v10.0.6
2
open
ODADrawingsExplorer
ODA · v27.1.0
2
open
Graphviz
Graphviz · v16.1.0
2
open
Windows Software Development Kit - Windows 10.0.26100.4188
Microsoft Corporation · v10.0.26100.7705
2
open
Intune WSL Plugin
Microsoft Corporation · v1.25.4.0
2
open
Godot Engine
Godot Engine · v4.7.2
2
open
Hello Minecraft! Launcher Stable
huanghongxun · v3.16.3
2
open
TeraCopy
Code Sector · v4.0.3.2
2
open
DeepL
DeepL SE · v26.9.1
2
open
YubiKey Smart Card Minidriver
Yubico AB · v5.0.4.273
2
open
RetroArch
Libretro · v1.22.2
2
open
Windows Software Development Kit - Windows 10.0.22621.2428
Microsoft Corporation · v10.0.22621.2428
2
open
360企业安全浏览器
360安全中心 · v13.3.4100.143
2
open
MediaInfo
MediaArea.net · v26.05
2
open
SoftPerfect RAM Disk
SoftPerfect Pty Ltd · v26.7
2
open
CLion
JetBrains s.r.o. · v2026.2.1
2
open
Windows Software Development Kit
Microsoft Corporation · v10.0.22000.832
2
open
Soda PDF Desktop 15
Avanquest Software (7270356 Canada Inc) · v15.0.16.24798
2
open
Vagrant
HashiCorp · v2.4.9
2
open
Virtio-win-guest-tools
Red Hat, Inc. · v0.1.285-1
2
open
Windows Software Development Kit
Microsoft Corporation · v10.0.20348.1
2
open
Lens
Mirantis, Inc. · v2026.9.20601-latest
2
open
Mullvad VPN
Mullvad VPN · v2025.13
2
open